Latest CyberSec News by @thecyberpicker

Prepare for PCI DSS v4.x compliance by April 1, 2025. Learn about mandatory Future-Dated Requirements and steps to ensure your organization's readiness.

Thales report reveals bots now account for 51% of all web traffic, surpassing human activity

This week, our Year in Review spotlight is on ransomware—where low-profile tactics led to high-impact consequences. Download our 2 page ransomware summary, or watch our 55 second video.

Pentesting firm Cobalt has found that organizations fix less than half of exploited vulnerabilities, with just 21% of generative AI flaws addressed

North Korea’s Slow Pisces used LinkedIn lures in 2025 to drop RN Stealer malware on crypto developers.

A UK man has been sentenced to over eight years for masterminding £100m phishing platform LabHost

Hertz disclosed a data breach after customer data was stolen via Cleo zero-day exploits in 2024, affecting Hertz, Thrifty, and Dollar brands

Last Friday morning, April 11, I was making my way home from NTT Research’s Upgrade 2025 innovation conference in San Francisco, when it struck me that we’re at a watershed moment. I was reflecting on NTT’s newly launched Physics of Artificial Intelligence Lab when a GeekWire article crossed my LinkedIn feed, touting a seemingly parallel

Huntress reports active exploitation of Gladinet CVE-2025-30406 in the wild, affecting seven organizations and 120 endpoints.

ABB Cylon Aspect 3.08.02 - Cookie User Password Disclosure. CVE-2024-51546 . hardware exploit for Multiple platform

Cacti 1.2.26 - Remote Code Execution (RCE) (Authenticated). CVE-2024-25641 . webapps exploit for PHP platform

ABB Cylon Aspect 3.08.03 - Hard-coded Secrets.. webapps exploit for Multiple platform

ABB Cylon Aspect 3.08.03 (MapServicesHandler) - Authenticated Reflected XSS.. webapps exploit for Multiple platform

ABB Cylon Aspect 3.08.02 (licenseUpload.php) - Stored Cross-Site Scripting. CVE-2024-6516 . hardware exploit for Multiple platform

ABB Cylon Aspect 3.08.02 (uploadDb.php) - Remote Code Execution. CVE-2024-48839 . hardware exploit for Multiple platform

ABB Cylon Aspect 3.08.02 (licenseServerUpdate.php) - Stored Cross-Site Scripting. CVE-2024-6516 . hardware exploit for Multiple platform

Ivanti Connect Secure 22.7R2.5 - Remote Code Execution (RCE). CVE-2025-0282 . remote exploit for Multiple platform

ABB Cylon Aspect 3.08.02 (webServerUpdate.php) - Input Validation Config Poisoning.. hardware exploit for PHP platform

ABB Cylon Aspect 3.08.03 (CookieDB) - SQL Injection.. hardware exploit for Multiple platform

ABB Cylon Aspect 3.08.02 (escDevicesUpdate.php) - Denial of Service (DOS). CVE-2024-48844 . hardware exploit for PHP platform

ABB Cylon Aspect 3.08.02 (bbmdUpdate.php) - Remote Code Execution. CVE-2024-6516CVE-2024-51550CVE-2024-48839 . hardware exploit for Multiple platform

ABB Cylon Aspect 3.07.02 (userManagement.php) - Weak Password Policy. CVE-2024-48845 . hardware exploit for Multiple platform

IBMi Navigator 7.5 - HTTP Security Token Bypass. CVE-2024-51464 . webapps exploit for Multiple platform

IBMi Navigator 7.5 - Server Side Request Forgery (SSRF). CVE-2024-51463 . webapps exploit for Multiple platform

Plane 0.23.1 - Server side request forgery (SSRF).. webapps exploit for Multiple platform

Really Simple Security 9.1.1.1 - Authentication Bypass. CVE-2024-10924 . webapps exploit for PHP platform

OpenCMS 17.0 - Stored Cross Site Scripting (XSS). CVE-2024-41947 . webapps exploit for PHP platform

Adapt Authoring Tool 0.11.3 - Remote Command Execution (RCE). CVE-2024-50672 . webapps exploit for Multiple platform

Pymatgen 2024.1 - Remote Code Execution (RCE). CVE-2024-23346 . remote exploit for Python platform

Meta resumes EU AI training using adult public data after regulatory approval, with opt-out option